Authentication flaw

2018-06-1818:29:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.8%

An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.

CPENameOperatorVersion
privileged_access_managerge2.0.0
privileged_access_managerlt3.0.0

CPE	Name	Operator	Version
	privileged_access_manager	ge	2.0.0
	privileged_access_manager	lt	3.0.0

References

www.securityfocus.com/bid/104496

support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html